Privacy Policy – Villa Penelope
This Privacy Policy describes how personal data is collected, used, and protected by Villa Penelope in accordance with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR).
​
1. Data Controller
The data controller is:
Villa Penelope
Crete, Greece
Email: info@villapenelopecrete.com
​
2. Personal Data Collected
We may collect the following personal data:
Name and surname
Email address
Phone number
Booking details (dates, number of guests, special requests)
Any information voluntarily provided through the contact form or direct communication
Payment details (credit/debit card data) are not collected or stored by Villa Penelope.
​
3. Purpose of Data Processing
Personal data is collected and processed for the following purposes:
Responding to enquiries and contact requests
Managing reservations and accommodation services
Processing bookings made through the external booking platform
Administrative, accounting, and communication purposes related to hospitality services
​
4. Legal Basis for Processing
Data processing is based on:
The user’s explicit consent
The necessity to perform pre-contractual and contractual measures related to accommodation services
Compliance with legal obligations
​
5. Booking Platform & Payments
Reservations made through this website are processed via an external booking platform (Lodgify).
Payments are securely processed by Stripe, a certified third-party payment service provider.
Villa Penelope does not access, store, or process guests’ payment card details.
Personal data entered during the booking process may be processed by these providers in accordance with their respective privacy policies and GDPR compliance.
​
6. Data Retention
Personal data will be retained only for the time necessary to fulfill the purposes for which it was collected, to manage bookings and stays, or as required by applicable laws.
​
7. Data Sharing
Personal data may be shared with third parties only when necessary to:
Manage booking and payment services (e.g. Lodgify, Stripe)
Fulfill legal or regulatory obligations
Data is never sold or shared for marketing purposes.
​
8. Data Security
Appropriate technical and organizational measures are adopted to protect personal data against unauthorized access, loss, misuse, or disclosure.
​
9. User Rights
Users have the right to:
Access their personal data
Request correction or deletion
Restrict or object to processing
Withdraw consent at any time
Requests can be sent to: info@villapenelopecrete.com
​
10. Changes to This Policy
This Privacy Policy may be updated from time to time.
Any changes will be published on this page.
Cookie Policy – Villa Penelope
Cookie Policy
This website uses technical cookies only, necessary for the correct functioning of the site.
What are cookies?
Cookies are small text files stored on the user’s device to improve website functionality and user experience.
​
Types of cookies used
Technical cookies: required for website operation
No profiling or marketing cookies are used directly on this website
If third-party services (such as booking platforms or payment providers) are accessed, their respective cookie policies apply.
Users can manage cookie preferences through their browser settings.
​
Privacy Notice
I have read and accept the Privacy Policy and consent to the processing of my personal data.